General

  • Target

    3c323dacc7a0b9e69acfcd23a9b2266e3803600de184f5684541223f2f0ac85b

  • Size

    522KB

  • Sample

    241119-hzx2ms1pc1

  • MD5

    35ac830ad12275b6f728bf488be64177

  • SHA1

    2daca325be8ea80906cba98badac0c59c65f231a

  • SHA256

    3c323dacc7a0b9e69acfcd23a9b2266e3803600de184f5684541223f2f0ac85b

  • SHA512

    3980d78808ee7c2b354b21f25de18e2bb7023055f36bc7fbe7a92b2bf5f8672f7a1edff53cf3662c6bf28eb37c252c1d6f5c3214f88bd0153a3b35dd9d6060ff

  • SSDEEP

    12288:PqpVS4VidmlvARnu96usbq2Lwzeupc1+aaB6e386Lx+Xvcjk:Pq+SidvubnJzeupc1

Score
10/10

Malware Config

Extracted

Family

lumma

C2

https://processhol.sbs/api

https://p10tgrace.sbs/api

https://peepburry828.sbs/api

https://3xp3cts1aim.sbs/api

https://p3ar11fter.sbs/api

Targets

    • Target

      3c323dacc7a0b9e69acfcd23a9b2266e3803600de184f5684541223f2f0ac85b

    • Size

      522KB

    • MD5

      35ac830ad12275b6f728bf488be64177

    • SHA1

      2daca325be8ea80906cba98badac0c59c65f231a

    • SHA256

      3c323dacc7a0b9e69acfcd23a9b2266e3803600de184f5684541223f2f0ac85b

    • SHA512

      3980d78808ee7c2b354b21f25de18e2bb7023055f36bc7fbe7a92b2bf5f8672f7a1edff53cf3662c6bf28eb37c252c1d6f5c3214f88bd0153a3b35dd9d6060ff

    • SSDEEP

      12288:PqpVS4VidmlvARnu96usbq2Lwzeupc1+aaB6e386Lx+Xvcjk:Pq+SidvubnJzeupc1

    Score
    10/10
    • Lumma Stealer, LummaC

      Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    • Lumma family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks